Enabling single finger tap user authentication and application launch and login using fingerprint scanning on a display screen

ABSTRACT

Single tap launch and login to a secure application is provided. User authentication information is verified based on fingerprint data in response to the data processing system receiving an input via a finger of a user on a display screen to execute the secure application. The user authentication information is passed to the secure application as an invoking parameter to execute the secure application. Content corresponding to the secure application is received in response to execution of the secure application.

BACKGROUND 1. Field

The disclosure relates generally to fingerprint recognition technologyand more specifically to enabling a single on display screen fingercontact to authenticate a user of an electronic device, unlock theelectronic device, and launch and login to a secure application inparallel using a whole display screen fingerprint scanner of theelectronic device.

2. Description of the Related Art

Today, considerable interest exists in providing electronic devices,which may include smart phones, cellular phones, smart watches, desktopcomputers, laptop computers, handheld computers, such as tablets, smarttelevisions, gaming devices, and the like, with various means to securedata on these devices. Biometric security systems are one approach toproviding data security and privacy on these devices. Fingerprints areone form of biometrics used to identify individuals and verify theiridentity. Fingerprint recognition systems generally collect fingerprintimage samples and compare those image samples against a database ofstored fingerprint templates. In addition, fingerprint scanners arebecoming increasingly ubiquitous in electronic device designs.

Furthermore, application user authentication and data security iscontinuously evolving. However, tension exists between increasing easeof electronic device use and protecting a user's data privacy.Currently, it requires several user interactions with an electronicdevice to successfully login to a secure application, such as a bankingapplication, when using current fingerprint recognition technology.

SUMMARY

According to one illustrative embodiment, a computer-implemented methodfor providing single tap launch and login to a secure application isprovided. A data processing system verifies user authenticationinformation based on fingerprint data in response to the data processingsystem receiving an input via a finger of a user on a display screen toexecute the secure application. The data processing system passes theuser authentication information to the secure application as an invokingparameter to execute the secure application. The data processing systemreceives content corresponding to the secure application in response toexecution of the secure application. According to other illustrativeembodiments, a data processing system and computer program product forproviding single tap launch and login to a secure application areprovided.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a pictorial representation of a network of data processingsystems in which illustrative embodiments may be implemented;

FIG. 2 is a diagram of a data processing system in which illustrativeembodiments may be implemented;

FIG. 3 is a diagram illustrating an example of an electronic device inaccordance with an illustrative embodiment;

FIG. 4 is a diagram illustrating an electronic device cross-sectionalview in accordance with an illustrative embodiment;

FIG. 5 is a flowchart illustrating a process for parallel userauthentication and secure application launch in accordance with anillustrative embodiment; and

FIG. 6 is a flowchart illustrating a process for executing a securefunction using an invoking parameter in accordance with an illustrativeembodiment.

DETAILED DESCRIPTION

The present invention may be a system, a method, and/or a computerprogram product at any possible technical detail level of integration.The computer program product may include a computer readable storagemedium (or media) having computer readable program instructions thereonfor causing a processor to carry out aspects of the present invention.

The computer readable storage medium can be a tangible device that canretain and store instructions for use by an instruction executiondevice. The computer readable storage medium may be, for example, but isnot limited to, an electronic storage device, a magnetic storage device,an optical storage device, an electromagnetic storage device, asemiconductor storage device, or any suitable combination of theforegoing. A non-exhaustive list of more specific examples of thecomputer readable storage medium includes the following: a portablecomputer diskette, a hard disk, a random access memory (RAM), aread-only memory (ROM), an erasable programmable read-only memory (EPROMor Flash memory), a static random access memory (SRAM), a portablecompact disc read-only memory (CD-ROM), a digital versatile disk (DVD),a memory stick, a floppy disk, a mechanically encoded device such aspunch-cards or raised structures in a groove having instructionsrecorded thereon, and any suitable combination of the foregoing. Acomputer readable storage medium, as used herein, is not to be construedas being transitory signals per se, such as radio waves or other freelypropagating electromagnetic waves, electromagnetic waves propagatingthrough a waveguide or other transmission media (e.g., light pulsespassing through a fiber-optic cable), or electrical signals transmittedthrough a wire.

Computer readable program instructions described herein can bedownloaded to respective computing/processing devices from a computerreadable storage medium or to an external computer or external storagedevice via a network, for example, the Internet, a local area network, awide area network and/or a wireless network. The network may comprisecopper transmission cables, optical transmission fibers, wirelesstransmission, routers, firewalls, switches, gateway computers and/oredge servers. A network adapter card or network interface in eachcomputing/processing device receives computer readable programinstructions from the network and forwards the computer readable programinstructions for storage in a computer readable storage medium withinthe respective computing/processing device.

Computer readable program instructions for carrying out operations ofthe present invention may be assembler instructions,instruction-set-architecture (ISA) instructions, machine instructions,machine dependent instructions, microcode, firmware instructions,state-setting data, configuration data for integrated circuitry, oreither source code or object code written in any combination of one ormore programming languages, including an object oriented programminglanguage such as Smalltalk, C++, or the like, and procedural programminglanguages, such as the “C” programming language or similar programminglanguages. The computer readable program instructions may executeentirely on the user's computer, partly on the user's computer, as astand-alone software package, partly on the user's computer and partlyon a remote computer or entirely on the remote computer or server. Inthe latter scenario, the remote computer may be connected to the user'scomputer through any type of network, including a local area network(LAN) or a wide area network (WAN), or the connection may be made to anexternal computer (for example, through the Internet using an InternetService Provider). In some embodiments, electronic circuitry including,for example, programmable logic circuitry, field-programmable gatearrays (FPGA), or programmable logic arrays (PLA) may execute thecomputer readable program instructions by utilizing state information ofthe computer readable program instructions to personalize the electroniccircuitry, in order to perform aspects of the present invention.

Aspects of the present invention are described herein with reference toflowchart illustrations and/or block diagrams of methods, apparatus(systems), and computer program products according to embodiments of theinvention. It will be understood that each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer readable program instructions.

These computer readable program instructions may be provided to aprocessor of a general purpose computer, special purpose computer, orother programmable data processing apparatus to produce a machine, suchthat the instructions, which execute via the processor of the computeror other programmable data processing apparatus, create means forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks. These computer readable program instructionsmay also be stored in a computer readable storage medium that can directa computer, a programmable data processing apparatus, and/or otherdevices to function in a particular manner, such that the computerreadable storage medium having instructions stored therein comprises anarticle of manufacture including instructions which implement aspects ofthe function/act specified in the flowchart and/or block diagram blockor blocks.

The computer readable program instructions may also be loaded onto acomputer, other programmable data processing apparatus, or other deviceto cause a series of operational steps to be performed on the computer,other programmable apparatus or other device to produce a computerimplemented process, such that the instructions which execute on thecomputer, other programmable apparatus, or other device implement thefunctions/acts specified in the flowchart and/or block diagram block orblocks.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods, and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof instructions, which comprises one or more executable instructions forimplementing the specified logical function(s). In some alternativeimplementations, the functions noted in the blocks may occur out of theorder noted in the Figures. For example, two blocks shown in successionmay, in fact, be executed substantially concurrently, or the blocks maysometimes be executed in the reverse order, depending upon thefunctionality involved. It will also be noted that each block of theblock diagrams and/or flowchart illustration, and combinations of blocksin the block diagrams and/or flowchart illustration, can be implementedby special purpose hardware-based systems that perform the specifiedfunctions or acts or carry out combinations of special purpose hardwareand computer instructions.

With reference now to the figures, and in particular, with reference toFIGS. 1-4, diagrams of data processing environments are provided inwhich illustrative embodiments may be implemented. It should beappreciated that FIGS. 1-4 are only meant as examples and are notintended to assert or imply any limitation with regard to theenvironments in which different embodiments may be implemented. Manymodifications to the depicted environments may be made.

FIG. 1 depicts a pictorial representation of a network of dataprocessing systems in which illustrative embodiments may be implemented.Network data processing system 100 is a network of computers, dataprocessing systems, and other devices in which the illustrativeembodiments may be implemented. Network data processing system 100contains network 102, which is the medium used to provide communicationslinks between the computers, data processing systems, and other devicesconnected together within network data processing system 100. Network102 may include connections, such as, for example, wire communicationlinks, wireless communication links, and fiber optic cables.

In the depicted example, server 104 and server 106 connect to network102, along with storage 108. Server 104 and server 106 may be, forexample, server computers with high-speed connections to network 102. Inaddition, server 104 and server 106 may provide secure services, suchas, for example, secure banking services, secure financial services,secure healthcare services, secure transaction services, and the like,to client devices. Also, it should be noted that server 104 and server106 may each represent a plurality of different servers providing aplurality of different secure services. Furthermore, other serversconnected to network 102 may provide communication services, such as,for example, voice and text communications between client devices.

Client 110, client 112, and client 114 also connect to network 102.Clients 110, 112, and 114 are clients of server 104 and server 106.Further, server 104 and server 106 may provide information, such assoftware applications and application updates to clients 110, 112, and114.

In this example, clients 110, 112, and 114 are illustrated as mobileelectronic devices, such as smart phones or cellular telephones, withwireless communication links to network 102. However, it should be notedthat clients 110, 112, and 114 are meant as examples only. In otherwords, clients 110, 112, and 114 may include other types of dataprocessing systems, such as, for example, desktop or personal computers,laptop computers, handheld tablet computers, smart watches, smarttelevisions, gaming devices, and the like, with wire or wirelesscommunication links to network 102. In addition, clients 110, 112, and114 are electronic devices that include display screens with touchscreen capabilities. Users of clients 110, 112, and 114 may utilizeapplications loaded on clients 110, 112, and 114 to access and utilizethe secure services provided by server 104 and server 106.

Storage 108 is a network storage device capable of storing any type ofdata in a structured format or an unstructured format. In addition,storage 108 may represent a set of one or more network storage devices.Storage 108 may store, for example, names and identifiers for aplurality of different client device users; fingerprint biometrictemplates corresponding to each of the different client device users;secure applications corresponding to a plurality of different secureservices, operating system images with user authentication managers, andthe like. Further, storage 108 may store other data, such asauthentication or credential data that may include user names,passwords, and other types of biometric data associated with the clientdevice users and system administrators, for example.

In addition, it should be noted that network data processing system 100may include any number of additional server devices, client dataprocessing system devices, and other devices not shown. Program codelocated in network data processing system 100 may be stored on acomputer readable storage medium and downloaded to a computer or dataprocessing system for use. For example, program code may be stored on acomputer readable storage medium on server 104 and downloaded to client110 over network 102 for use on client 110.

In the depicted example, network data processing system 100 may beimplemented as a number of different types of communication networks,such as, for example, an internet, an intranet, a local area network(LAN), a wide area network (WAN), or any combination thereof. FIG. 1 isintended as an example, and not as an architectural limitation for thedifferent illustrative embodiments.

With reference now to FIG. 2, a diagram of a data processing system isdepicted in accordance with an illustrative embodiment. Data processingsystem 200 is an example of an electronic device, such as client 110 inFIG. 1, in which computer readable program code or program instructionsimplementing processes of illustrative embodiments may be located. Inthis illustrative example, data processing system 200 includescommunications fabric 202, which provides communications betweenprocessor unit 204, memory 206, persistent storage 208, communicationsunit 210, input/output (I/O) unit 212, display 214, and fingerprintscanner 216.

Processor unit 204 serves to execute instructions for softwareapplications and programs that may be loaded into memory 206. Processorunit 204 may be a set of one or more hardware processor devices or maybe a multi-processor core, depending on the particular implementation.Further, processor unit 204 may be implemented using one or moreheterogeneous processor systems, in which a main processor is presentwith secondary processors on a single chip. As another illustrativeexample, processor unit 204 may be a symmetric multi-processor systemcontaining multiple processors of the same type.

Memory 206 and persistent storage 208 are examples of storage devices218. A computer readable storage device is any piece of hardware that iscapable of storing information, such as, for example, withoutlimitation, data, computer readable program code in functional form,and/or other suitable information either on a transient basis and/or apersistent basis. Further, a computer readable storage device excludes apropagation medium. Memory 206, in these examples, may be, for example,a random access memory, or any other suitable volatile or non-volatilestorage device. Persistent storage 208 may take various forms, dependingon the particular implementation. For example, persistent storage 208may contain one or more devices. For example, persistent storage 208 maybe a hard drive, a flash memory, a rewritable optical disk, a rewritablemagnetic tape, or some combination of the above. The media used bypersistent storage 208 may be removable. For example, a removable harddrive may be used for persistent storage 208.

In this example, persistent storage 208 stores operating system 220 andapplications 222. Applications 222 represent a plurality of differentsoftware application programs, which provide a plurality of differentfunctions, on data processing system 200. Operating system 220 directsoperations of data processing system 200, controls and schedulesexecution of applications 222, and manages storage devices 218,input/output unit 212, and communications unit 210, for example. Also,it should be noted that operating system 220 may be a mobile operatingsystem. A mobile operating system is specifically designed to run onmobile electronic devices, such as cellular telephones, smart phones,smart watches, personal digital assistants, tablet computers, and otherhandheld mobile devices.

In this example, operating system 220 includes user authenticationmanager 224. User authentication manager 224 authenticates a user ofdata processing system 200 via a finger of the user contacting anylocation on display 214 using fingerprint scanner 216, unlocks dataprocessing system 200, and launches and logs in to a secure applicationcorresponding to an icon at a location where the user's finger contacteddisplay 214. User authentication manager 224 performs all three of theseactions substantially at a same time in parallel.

Further, it should be noted that even though user authentication manager224 is illustrated as residing in operating system 220, in analternative illustrative embodiment user authentication manager 224 maybe a separate component of data processing system 200. For example, userauthentication manager 224 may be a secure hardware component coupled tocommunication fabric 202 or a combination of secure hardware andsoftware components.

In this example, user authentication manager 224 includes fingerprintcomparator 226, authentication data module 228, application launcher230, and application call back function 232. However, it should be notedthat user authentication manager 224 may include more or fewercomponents than shown. For example, different illustrative embodimentsmay combine two or more components into one component, divide onecomponent into two or more components, or add other components notshown.

User authentication manager 224 utilizes fingerprint comparator 226 tocompare scanned fingerprint biometric sample 234, which was captured byfingerprint scanner 216, with stored fingerprint biometric template 236,which corresponds to an authorized user of data processing system 200.If fingerprint comparator 226 determines that scanned fingerprintbiometric sample 234 matches stored fingerprint biometric template 236,then fingerprint comparator 226 verifies or authenticates the identityof the user. In response to fingerprint comparator 226 authenticatingthe identity of the user, authentication data module 228 retrievesauthentication data 238, which corresponds to the user, from persistentstorage 208. Authentication data 238 may be, for example, storedinformation, such as biometric information, user name information,password information, passcode information, or any combination thereof.Alternatively, authentication data module 228 may generateauthentication data 238. Authentication data module 228 providesauthentication data 238 to application launcher 230 and/or applicationcall back function 232.

User authentication manager 224 utilizes application launcher 230 tolaunch and login to secure application 240. Application launcher 230utilizes authentication data 238 as an invoking parameter to open andexecute secure application 240. Secure application 240 represents asoftware application program having restricted access, which requiresuser authentication to access.

User authentication manager 224 utilizes application call back function232 to send authentication data 238 to secure application 240 inresponse to user authentication call back requester 242 registering arequest with application call back function 232 for authentication data238. After receiving authentication data 238, secure application 240 mayutilize authentication data 238 to, for example, automatically login toa network server to receive user-personalized content corresponding tosecure application 240. Secure application 240 may be, for example, abanking application for retrieving bank account balance informationcorresponding to the authenticated user.

Communications unit 210, in this example, provides for communicationwith other computers, data processing systems, and client devices via anetwork, such as network 102 in FIG. 1. Communications unit 210 mayprovide communications using both physical and wireless communicationslinks. The physical communications link may utilize, for example, awire, cable, universal serial bus, or any other physical technology toestablish a physical communications link for data processing system 200.The wireless communications link may utilize, for example, shortwave,high frequency, ultra high frequency, microwave, wireless fidelity(Wi-Fi), Bluetooth® technology, global system for mobile communications(GSM), code division multiple access (CDMA), second-generation (2G),third-generation (3G), fourth-generation (4G), 4G Long Term Evolution(LTE), LTE Advanced, or any other wireless communication technology orstandard to establish a wireless communications link for data processingsystem 200.

Input/output unit 212 allows for the input and output of data with otherdevices that may be connected to data processing system 200. Forexample, input/output unit 212 may provide a connection for user inputthrough a keyboard, keypad, and/or some other suitable input device.Display 214 provides a mechanism to display information to a user andincludes touch screen capabilities to allow the user to make on-screenselections through user interfaces or input data, for example.

Fingerprint scanner 216 is a device that generates a digital image of auser's fingerprint corresponding to a finger of the user. It should benoted that as used herein, the term finger may also refer to a thumb.Fingerprint scanner 216 is a whole or full display screen fingerprintscanner. In other words, fingerprint scanner 216 is capable of scanninga fingerprint anywhere the user contacts or touches display 214 with afinger. Data processing system 200 utilizes fingerprint scanner 216 toverify an identity of the user. Fingerprint recognition or fingerprintauthentication refers to verifying a match between scanned fingerprintbiometric sample 234 and stored fingerprint biometric template 236corresponding to the user.

Instructions for operating system 220, applications 222, and/or programsmay be located in storage devices 218, which are in communication withprocessor unit 204 through communications fabric 202. In thisillustrative example, the instructions are in a functional form onpersistent storage 208. These instructions may be loaded into memory 206for running by processor unit 204. The processes of the differentembodiments may be performed by processor unit 204 usingcomputer-implemented program instructions, which may be located in amemory, such as memory 206. These program instructions are referred toas program code, computer usable program code, or computer readableprogram code that may be read and run by a processor in processor unit204. The program code, in the different embodiments, may be embodied ondifferent physical computer readable storage devices, such as memory 206or persistent storage 208.

Program code 244 is located in a functional form on computer readablemedia 246 that is selectively removable and may be loaded onto ortransferred to data processing system 200 for running by processor unit204. Program code 244 and computer readable media 246 form computerprogram product 248. In one example, computer readable media 246 may becomputer readable storage media 250 or computer readable signal media252. Computer readable storage media 250 may include, for example, anoptical or magnetic disc that is inserted or placed into a drive orother device that is part of persistent storage 208 for transfer onto astorage device, such as a hard drive, that is part of persistent storage208. Computer readable storage media 250 also may take the form of apersistent storage, such as a hard drive, a thumb drive, or a flashmemory that is connected to data processing system 200. In someinstances, computer readable storage media 250 may not be removable fromdata processing system 200.

Alternatively, program code 244 may be transferred to data processingsystem 200 using computer readable signal media 252. Computer readablesignal media 252 may be, for example, a propagated data signalcontaining program code 244. For example, computer readable signal media252 may be an electro-magnetic signal, an optical signal, and/or anyother suitable type of signal. These signals may be transmitted overcommunication links, such as wireless communication links, an opticalfiber cable, a coaxial cable, a wire, and/or any other suitable type ofcommunications link. In other words, the communications link and/or theconnection may be physical or wireless in the illustrative examples. Thecomputer readable media also may take the form of non-tangible media,such as communication links or wireless transmissions containing theprogram code.

In some illustrative embodiments, program code 244 may be downloadedover a network to persistent storage 208 from another device or dataprocessing system through computer readable signal media 252 for usewithin data processing system 200. For instance, program code stored ina computer readable storage media in a data processing system may bedownloaded over a network from the data processing system to dataprocessing system 200. The data processing system providing program code244 may be a server computer, a client computer, or some other devicecapable of storing and transmitting program code 244.

The different components illustrated for data processing system 200 arenot meant to provide architectural limitations to the manner in whichdifferent embodiments may be implemented. The different illustrativeembodiments may be implemented in a data processing system includingcomponents in addition to, or in place of, those illustrated for dataprocessing system 200. Other components shown in FIG. 2 can be variedfrom the illustrative examples shown. The different embodiments may beimplemented using any hardware device or system capable of executingprogram code. As one example, data processing system 200 may includeorganic components integrated with inorganic components and/or may becomprised entirely of organic components excluding a human being. Forexample, a storage device may be comprised of an organic semiconductor.

As another example, a computer readable storage device in dataprocessing system 200 is any hardware apparatus that may store data.Memory 206, persistent storage 208, and computer readable storage media250 are examples of physical storage devices in a tangible form.

In another example, a bus system may be used to implement communicationsfabric 202 and may be comprised of one or more buses, such as a systembus or an input/output bus. Of course, the bus system may be implementedusing any suitable type of architecture that provides for a transfer ofdata between different components or devices attached to the bus system.Additionally, a communications unit may include one or more devices usedto transmit and receive data, such as a modem or a network adapter.Further, a memory may be, for example, memory 206 or a cache such asfound in an interface and memory controller hub that may be present incommunications fabric 202.

In the course of developing illustrative embodiments, it was discoveredthat existing methods require a user to open an application and then usefingerprint recognition technology to authenticate the user prior to theuser using the application. Illustrative embodiments reduce the numberof user interactions with an electronic device to open and log in to anapplication. For example, illustrative embodiments, in parallel,authenticate the electronic device user via a display screen finger tapof the user, unlock the electronic device, and launch and login to theapplication. However, it should be noted that illustrative embodimentsmay send authenticate data as an invoking parameter to execute theapplication from a locked display screen, without unlocking theelectronic device. For example, illustrative embodiments may allow auser to make a payment via a financial application using a single fingertap on a locked display screen to launch and login to the financialapplication only, while not unlocking the electronic device. Thus,illustrative embodiments provide ease of use of electronic deviceapplications and faster response times by performing user authenticationin parallel with application launching. Furthermore, illustrativeembodiments eliminate a need for additional hardware or buttons thattake up valuable real estate on electronic devices, such as, forexample, smart phones and smart watches.

Illustrative embodiments utilize a fingerprint scanner capable ofcapturing biometric fingerprint samples through a display screen of anelectronic device. In addition, illustrative embodiments utilize a fullor whole display screen fingerprint scanner located subjacent to thedisplay screen. Thus, illustrative embodiments improve ease ofapplication use with one tap user authentication.

For example, in response to a user tapping on an application icon on adisplay screen of an electronic device, an operating system of theelectronic device reads the fingerprint information, which was capturedon the display screen at the location where the user touched the displayscreen, to authenticate the user. In parallel, the operating systemlaunches the application. Further, the operating system provides a userauthentication call back notification to the application as soon as theoperating system authenticates the user. The application may display ageneral notification popup screen to the user as soon as the operatingsystem launches the application. Furthermore, the application registersa user authentication call back request with the operating system sothat the operating system will notify the application when the operatingsystem verifies the identity of the user. Upon user authentication, theoperating system logs in to the application using authentication dataand the application displays the appropriate content.

As a result, illustrative embodiments do not require the user to havethe fingerprint scanned a second time to access the application content.For example, illustrative embodiments provide user authenticationspecific to an application, such as a banking application, which mayrequire user authentication after the electronic device alreadyauthenticated the user. Illustrative embodiments eliminate this seconduser authentication step by enabling a single user authentication viathe operating system authorizing the application.

Moreover, illustrative embodiments may decrease power (e.g., battery)consumption and processor usage of an electronic device by scanning fora fingerprint at predefined time intervals instead of continuously whenthe user contacts the display screen. Alternatively, illustrativeembodiments may scan for a fingerprint to authenticate a user only afteran action by the user requires the operating system to invoke anapplication. In addition, in response to a user swiping to unlock from ahome screen (e.g., opens a notification), illustrative embodiments notonly unlock the electronic device (e.g., smart phone), but alsoauthenticate the user to the application as well. Further, in responseto a user tapping on an application shortcut displayed on a lockedscreen, illustrative embodiments unlock the electronic device from lockscreen and login to the application corresponding to the applicationshortcut. Furthermore, in response to a user tapping on an applicationicon when the electronic device is already unlocked, illustrativeembodiments open the application with login information already verifiedso that there is no need for scanning the user's fingerprint a secondtime.

With reference now to FIG. 3, a diagram illustrating an example of anelectronic device is depicted in accordance with an illustrativeembodiment. Electronic device 300 is a system of software and hardwarecomponents for authenticating a user of electronic device 300, unlockingelectronic device 300, and launching and logging into a secureapplication at substantially a same time in parallel via finger contactof the user on display screen 302. Electronic device 300 may beimplemented in a data processing system, such as data processing system200 in FIG. 2.

In this example, electronic device 300 is shown as a mobilecommunication device, such as a cellular telephone or smart phone.However, it should be noted that electronic device 300 is only meant asan example and not as a limitation on illustrative embodiments. In otherwords, electronic device 300 may include other types of electronicdevices, such as, for example, a smart watch, a desktop computer, alaptop computer, a handheld computer, a smart television, a gamingdevice, and the like.

Electronic device 300 includes display screen 302, which has touchscreen capabilities. Display screen 302 may be, for example, display 214in FIG. 2. Also, it should be noted that electronic device 300 includesa whole display screen fingerprint scanner, such as fingerprint scanner216 in FIG. 2, located underneath display screen 302. The whole displayscreen fingerprint scanner captures a biometric fingerprint sample whena finger of the user contacts any portion of display screen 302.

Electronic device 300 utilizes display screen 302 to display informationto the user of electronic device 300. In this example, display screen302 displays application icons 304 to the user. Application icons 304correspond to a plurality of different applications, such as, forexample, applications 222 in FIG. 2.

In response to the user selecting an application icon in applicationicons 304 by contacting display screen 302 at a location of the selectedapplication icon, electronic device 300 utilizes the whole displayscreen fingerprint scanner to capture a biometric fingerprint sample ofthe user. The selected application icon may correspond to a secureapplication, such as secure application 240 in FIG. 2, which may be abanking application, for example. Electronic device 300 utilizes thecaptured biometric fingerprint sample to authenticate the user and, inparallel, to launch and login to the application corresponding to theselected application icon.

In this example, electronic device 300 also includes microphone 306 andspeaker 308. However, it should be noted that electronic device 300 mayinclude other components not shown, such as, for example, a camera, adevice power on button, and the like.

With reference now to FIG. 4, a diagram illustrating an electronicdevice cross-sectional view is depicted in accordance with anillustrative embodiment. Electronic device cross-sectional view 400illustrates a cross-section of electronic device 402. Electronic device402 may be, for example, client 110 in FIG. 1, data processing system200 in FIG. 2, or electronic device 300 in FIG. 3.

Electronic device 402 includes display screen 404 and full displayscreen fingerprint scanner 406. Display screen 404 may be, for example,display screen 302 in FIG. 3. Full display screen fingerprint scanner406 may be, for example, fingerprint scanner 216 in FIG. 2.

In this example, display screen 404 displays secure application icon408. However, it should be noted that display screen 404 may display aplurality of different application icons and other images. Secureapplication icon 408 corresponds to a secure application, such as secureapplication 240 in FIG. 2.

In response to user's finger 410 contacting display screen 404 at alocation of secure application icon 408, full display screen fingerprintscanner 406 captures an image of the user's fingerprint. Full displayscreen fingerprint scanner 406 sends the user's captured fingerprintdata to operating system 412 to authenticate the user. Operating system412 may be, for example, operating system 220 in FIG. 2. In parallelwith authenticating the user, operating system 412 launches the secureapplication corresponding to secure application icon 408 and logs in tothe secure application using retrieved or generated authentication data,such as authentication data 238 in FIG. 2. After operating system 412logs in to the secure application, the secure application displayscontent corresponding to the secure application. The content of thesecure application may be, for example, balance informationcorresponding to a bank account owned by the user.

With reference now to FIG. 5, a flowchart illustrating a process forparallel user authentication and secure application launch is shown inaccordance with an illustrative embodiment. The process shown in FIG. 5may be implemented in a data processing system, such as, for example,client 110 in FIG. 1, data processing system 200 in FIG. 2, electronicdevice 300 in FIG. 3, or electronic device 402 in FIG. 4.

The process begins when the data processing system receives a biometricfingerprint sample of a user during a power on procedure (step 502). Thedata processing system compares the biometric fingerprint sample of theuser to a stored biometric fingerprint template of the user (step 504).In addition, the data processing system retrieves authentication datacorresponding to the user based on matching the biometric fingerprintsample to the stored biometric fingerprint template (step 506).Alternatively, the data processing system may generate theauthentication data in addition to, or instead of, retrieving theauthentication data. The authentication data may be, for example,authentication credentials and/or biometric information corresponding tothe user.

Subsequently, the data processing system makes a determination as towhether a finger of the user contacted a locked display screen of thedata processing system at a location of an icon corresponding to asecure application (step 508). If the data processing system determinesthat a finger of the user did not contact the locked display screen ofthe data processing system at a location of an icon corresponding to asecure application, no output of step 508, then the process returns tostep 508 where the data processing system waits for the user's finger tocontact the locked display screen. If the data processing systemdetermines that a finger of the user did contact the locked displayscreen of the data processing system at a location of an iconcorresponding to a secure application, yes output of step 508, then thedata processing system scans a fingerprint of the finger contacting thelocked display screen at the location of the icon corresponding to thesecure application (step 510). The data processing system alsoauthenticates the user based on the scan of the fingerprint (step 512).In addition, the data processing system unlocks the locked displayscreen (step 514).

It should be noted that the data processing system performs steps516-520 in parallel with performing steps 510-514. The data processingsystem launches the secure application from the locked display screen(step 516). The data processing system may launch the secure applicationfrom a shortcut or a most recently viewed application displayed on thelocked display screen. Furthermore, the data processing system receivesa user authentication call back request from the secure application forthe authentication data corresponding to the user (step 518). Moreover,the data processing system sends the authentication data correspondingto the user to the secure application based on authenticating the user(step 520).

After performing steps 510-514 and steps 516-520 in parallel, the dataprocessing system receives content corresponding to the secureapplication (step 522). The data processing system displays the contentof the secure application (step 524). Thereafter, the process returns tostep 508.

With reference now to FIG. 6, a flowchart illustrating a process forexecuting a secure function using an invoking parameter is shown inaccordance with an illustrative embodiment. The process shown in FIG. 6may be implemented in a data processing system, such as, for example,client 110 in FIG. 1, data processing system 200 in FIG. 2, electronicdevice 300 in FIG. 3, or electronic device 402 in FIG. 4.

The process begins when the data processing system, using an operatingsystem, identifies a fingerprint of a user in response to a finger ofthe user contacting a display screen of the data processing system (step602). The data processing system, using the operating system, providesfingerprint data corresponding to the fingerprint of the user as userauthentication information during startup of the data processing system(step 604). The data processing system, using the operating system,verifies the user authentication information based on the fingerprintdata in response to the data processing system receiving an input viathe finger of the user on the display screen to execute a securefunction corresponding to an application (step 606). A secure functionrequires user authentication prior to performance of the securefunction.

The data processing system, using the operating system, passes the userauthentication information to the application as an invoking parameterto execute the secure function (step 608). Subsequently, the dataprocessing system receives user-personalized content corresponding tothe secure function from the application (step 610). The data processingsystem displays the user-personalized content corresponding to thesecure function on the display screen of the data processing system(step 612). Thereafter, the process terminates.

Thus, illustrative embodiments of the present invention provide acomputer-implemented method, data processing system, and computerprogram product for providing single tap launch and login to a secureapplication using a whole display screen fingerprint scanning on adisplay screen of an electronic device. The descriptions of the variousembodiments of the present invention have been presented for purposes ofillustration, but are not intended to be exhaustive or limited to theembodiments disclosed. Many modifications and variations will beapparent to those of ordinary skill in the art without departing fromthe scope and spirit of the described embodiments. The terminology usedherein was chosen to best explain the principles of the embodiments, thepractical application or technical improvement over technologies foundin the marketplace, or to enable others of ordinary skill in the art tounderstand the embodiments disclosed herein.

What is claimed is:
 1. A computer-implemented method for providingsingle tap user authentication, launch and login to a secure applicationhaving restricted access requiring authentication for access thereto bya user, the computer-implemented method comprising: responsive to a dataprocessing system determining that a finger of the user contacted adisplay screen at a location of an icon corresponding to the secureapplication, scanning, by the data processing system, a fingerprint ofthe finger contacting the display screen at the location of the iconcorresponding to the secure application to obtain fingerprint data;verifying, by the data processing system, user authenticationinformation based on the fingerprint data in response to the dataprocessing system receiving an input via the finger of the user on thedisplay screen to execute the secure application having restrictedaccess requiring authentication for access thereto by the user; passing,by the data processing system, the user authentication information tothe secure application as an invoking parameter to execute the secureapplication; and receiving, by the data processing system, contentcorresponding to the secure application in response to execution of thesecure application.
 2. The computer-implemented method of claim 1,wherein a plurality of icons for a plurality of secure applications aredisplayed on the display screen, and further comprising: receiving, bythe data processing system, a biometric fingerprint sample of the user;and comparing, by the data processing system, the biometric fingerprintsample of the user to a stored biometric fingerprint templatecorresponding to the user.
 3. The computer-implemented method of claim1, wherein passing the user authentication information to the secureapplication comprises: sending, by the data processing system, the userauthentication information to the secure application in response to arequest by the secure application for the user authenticationinformation.
 4. The computer-implemented method of claim 1, wherein thedata processing system utilizes a whole display screen fingerprintscanner to capture the biometric fingerprint sample of the user, andwherein the whole display screen fingerprint scanner captures thebiometric fingerprint sample of the user after an action by the userrequires an operating system to invoke an application to conserveresources of the data processing system.
 5. The computer-implementedmethod of claim 1 further comprising: receiving, by the data processingsystem, a user authentication call back request from the secureapplication; retrieving, by the data processing system, the userauthentication information based on matching the biometric fingerprintsample to the stored biometric fingerprint template; and launching, bythe data processing system, the secure application, using the userauthentication information as an invoking parameter to open and executethe secure application.
 6. The computer-implemented method of claim 1further comprising: generating, by the data processing system, the userauthentication information based on matching the biometric fingerprintsample to the stored biometric fingerprint template; and launching, bythe data processing system, the secure application.
 7. Acomputer-implemented method for providing single tap launch and login toa secure application, the computer-implemented method comprising:verifying, by a data processing system, user authentication informationbased on fingerprint data in response to the data processing systemreceiving an input via a finger of a user on a display screen to executethe secure application; passing, by the data processing system, the userauthentication information to the secure application as an invokingparameter to execute the secure application; receiving, by the dataprocessing system, content corresponding to the secure application inresponse to execution of the secure application; receiving, by the dataprocessing system, a biometric fingerprint sample of the user;comparing, by the data processing system, the biometric fingerprintsample of the user to a stored biometric fingerprint templatecorresponding to the user; and responsive to the data processing systemdetermining that the finger of the user contacted a locked displayscreen at a location of an icon corresponding to the secure application,scanning, by the data processing system, a fingerprint of the fingercontacting the locked display screen at the location of the iconcorresponding to the secure application, authenticating, by the dataprocessing system, the user based on the scanning of the fingerprint,and unlocking, by the data processing system, the locked display screen,and in parallel, launching, by the data processing system, the secureapplication from the locked display screen, receiving, by the dataprocessing system, a user authentication call back request from thesecure application for the user authentication information, and sending,by the data processing system, the user authentication information tothe secure application based on authenticating the user.
 8. Thecomputer-implemented method of claim 7 further comprising: displaying,by the data processing system, the content of the secure application inresponse to the secure application receiving the user authenticationinformation.
 9. The computer-implemented method of claim 1, wherein thedata processing system utilizes an operating system of the dataprocessing system to concurrently perform in parallel the verifying ofthe user authentication information and the passing of the userauthentication information to the secure application.
 10. Thecomputer-implemented method of claim 1, wherein the content ispersonalized content corresponding to the user.
 11. A data processingsystem for providing single tap user authentication, launch and login toa secure application having restricted access requiring authenticationfor access thereto by a user, the data processing system comprising: abus system; a storage device connected to the bus system, wherein thestorage device stores program instructions; and a processor connected tothe bus system, wherein the processor executes the program instructionsto: scan, responsive to determining that a finger of the user contacteda display screen at a location of an icon corresponding to the secureapplication, a fingerprint of the finger contacting the display screenat the location of the icon corresponding to the secure application toobtain fingerprint data; verify user authentication information based onthe fingerprint data in response to the data processing system receivingan input via the finger of the user on the display screen to execute thesecure application having restricted access requiring authentication foraccess thereto by the user; pass the user authentication information tothe secure application as an invoking parameter to execute the secureapplication; and receive content corresponding to the secure applicationin response to execution of the secure application.
 12. The dataprocessing system of claim 11, wherein a plurality of icons for aplurality of secure applications are displayed on the display screen,and wherein the processor further executes the program instructions to:receiving, by the data processing system, a biometric fingerprint sampleof the user; and comparing, by the data processing system, the biometricfingerprint sample of the user to a stored biometric fingerprinttemplate corresponding to the user.
 13. The data processing system ofclaim 11, wherein passing the user authentication information to thesecure application comprises: sending, by the data processing system,the user authentication information to the secure application inresponse to a request by the secure application for the userauthentication information.
 14. A computer program product for providingsingle tap user authentication, launch and login to a secure applicationhaving restricted access requiring authentication for access thereto bya user, the computer program product comprising a computer readablestorage medium having program instructions embodied therewith, theprogram instructions executable by a data processing system to cause thedata processing system to perform a method comprising: responsive to adata processing system determining that a finger of the user contacted adisplay screen at a location of an icon corresponding to the secureapplication, scanning, by the data processing system, a fingerprint ofthe finger contacting the display screen at the location of the iconcorresponding to the secure application to obtain fingerprint data;verifying, by the data processing system, user authenticationinformation based on the fingerprint data in response to the dataprocessing system receiving an input via the finger of the user on thedisplay screen to execute the secure application having restrictedaccess requiring user authentication for access thereto by the user;passing, by the data processing system, the user authenticationinformation to the secure application as an invoking parameter toexecute the secure application; and receiving, by the data processingsystem, content corresponding to the secure application in response toexecution of the secure application.
 15. The computer program product ofclaim 14 wherein a plurality of icons for a plurality of secureapplications are displayed on the display screen, and furthercomprising: receiving, by the data processing system, a biometricfingerprint sample of the user; and comparing, by the data processingsystem, the biometric fingerprint sample of the user to a storedbiometric fingerprint template corresponding to the user.
 16. Thecomputer program product of claim 14, wherein passing the userauthentication information to the secure application comprises: sendingthe user authentication information to the secure application inresponse to a request by the secure application for the userauthentication information.
 17. The computer program product of claim14, wherein the data processing system utilizes a whole display screenfingerprint scanner to capture the biometric fingerprint sample of theuser, and wherein the whole display screen fingerprint scanner capturesthe biometric fingerprint sample of the user after an action by the userrequires an operating system to invoke an application to conserveresources of the data processing system.
 18. The computer programproduct of claim 14 further comprising: receiving, by the dataprocessing system, a user authentication call back request from thesecure application; retrieving, by the data processing system, the userauthentication information based on matching the biometric fingerprintsample to the stored biometric fingerprint template; and launching, bythe data processing system, the secure application, using the userauthentication information as an invoking parameter to open and executethe secure application.
 19. The computer program product of claim 14further comprising: generating, by the data processing system, the userauthentication information based on matching the biometric fingerprintsample to the stored biometric fingerprint template; and launching, bythe data processing system, the secure application.
 20. A computerprogram product for providing single tap launch and login to a secureapplication, the computer program product comprising a computer readablestorage medium having program instructions embodied therewith, theprogram instructions executable by a data processing system to cause thedata processing system to perform a method comprising: verifying, by thedata processing system, user authentication information based onfingerprint data in response to the data processing system receiving aninput via a finger of a user on a display screen to execute the secureapplication; passing, by the data processing system, the userauthentication information to the secure application as an invokingparameter to execute the secure application; receiving, by the dataprocessing system, content corresponding to the secure application inresponse to execution of the secure application; receiving, by the dataprocessing system, a biometric fingerprint sample of the user;comparing, by the data processing system, the biometric fingerprintsample of the user to a stored biometric fingerprint templatecorresponding to the user; and responsive to the data processing systemdetermining that the finger of the user contacted a locked displayscreen at a location of an icon corresponding to the secure application,scanning, by the data processing system, a fingerprint of the fingercontacting the locked display screen at the location of the iconcorresponding to the secure application, authenticating, by the dataprocessing system, the user based on the scanning of the fingerprint,and unlocking, by the data processing system, the locked display screen,and in parallel, launching, by the data processing system, the secureapplication from the locked display screen, receiving, by the dataprocessing system, a user authentication call back request from thesecure application for the user authentication information, and sending,by the data processing system, the user authentication information tothe secure application based on authenticating the user.